diff --git a/core/src/main/java/org/acegisecurity/ui/webapp/HttpSessionIntegrationFilter.java b/core/src/main/java/org/acegisecurity/ui/webapp/HttpSessionIntegrationFilter.java
index 5baeb02b30..685f9e3e27 100644
--- a/core/src/main/java/org/acegisecurity/ui/webapp/HttpSessionIntegrationFilter.java
+++ b/core/src/main/java/org/acegisecurity/ui/webapp/HttpSessionIntegrationFilter.java
@@ -105,7 +105,11 @@ public class HttpSessionIntegrationFilter extends AbstractIntegrationFilter {
 
     public Object extractFromContainer(ServletRequest request) {
         if (request instanceof HttpServletRequest) {
-            HttpSession httpSession = ((HttpServletRequest) request).getSession();
+            HttpSession httpSession = null;
+
+            try {
+                httpSession = ((HttpServletRequest) request).getSession();
+            } catch (IllegalStateException ignored) {}
 
             if (httpSession != null) {
                 Object authObject = httpSession.getAttribute(ACEGI_SECURITY_AUTHENTICATION_KEY);